{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ACKAGO7O6OL5DOP72RRXXWRVVO","short_pith_number":"pith:ACKAGO7O","canonical_record":{"source":{"id":"2410.07588","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-10T03:39:13Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"cdb9831ea8b3843c1dbf1bd00860f85d6672e9b08121c63946499939c3631413","abstract_canon_sha256":"1f05222ed49e5eb8c34878219ae3e4e234d2f825b312b879079b795a911deaa2"},"schema_version":"1.0"},"canonical_sha256":"0094033beef397d1b9ffd4637bda35abb479763d518c7356db452271a19ecfa0","source":{"kind":"arxiv","id":"2410.07588","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.07588","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"arxiv_version","alias_value":"2410.07588v2","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.07588","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"pith_short_12","alias_value":"ACKAGO7O6OL5","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"pith_short_16","alias_value":"ACKAGO7O6OL5DOP7","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"pith_short_8","alias_value":"ACKAGO7O","created_at":"2026-07-05T11:13:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ACKAGO7O6OL5DOP72RRXXWRVVO","target":"record","payload":{"canonical_record":{"source":{"id":"2410.07588","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-10T03:39:13Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"cdb9831ea8b3843c1dbf1bd00860f85d6672e9b08121c63946499939c3631413","abstract_canon_sha256":"1f05222ed49e5eb8c34878219ae3e4e234d2f825b312b879079b795a911deaa2"},"schema_version":"1.0"},"canonical_sha256":"0094033beef397d1b9ffd4637bda35abb479763d518c7356db452271a19ecfa0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:13:13.903217Z","signature_b64":"7gEAeRWZgP4x93D8NNfjwt0ZBgOmtWcHIynhSqXJE3TYeDjiEspW7GuEGyj/UQGs1SykpJ5ag9PcFomEefSCCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0094033beef397d1b9ffd4637bda35abb479763d518c7356db452271a19ecfa0","last_reissued_at":"2026-07-05T11:13:13.902654Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:13:13.902654Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.07588","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:13:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a33YlNCpF3hEzFRwmGtdf6hKA9ha9VRbqPEvHXFbcH4sYp+aThyxiv/E1O+0uAg9ovnt3aFDh0X1KJYuocvnAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T16:15:20.109997Z"},"content_sha256":"f84d08e95349017136f16706154e5cfdb86323b9e5bd524bfff6794782fbf7fd","schema_version":"1.0","event_id":"sha256:f84d08e95349017136f16706154e5cfdb86323b9e5bd524bfff6794782fbf7fd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ACKAGO7O6OL5DOP72RRXXWRVVO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Careful About What App Promotion Ads Recommend! Detecting and Explaining Malware Promotion via App Promotion Graph","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Chaoran Chen, Shang Ma, Shao Yang, Shifu Hou, Tao Xie, Toby Jia-Jun Li, Xusheng Xiao, Yanfang Ye","submitted_at":"2024-10-10T03:39:13Z","abstract_excerpt":"In Android apps, their developers frequently place app promotion ads, namely advertisements to promote other apps. Unfortunately, the inadequate vetting of ad content allows malicious developers to exploit app promotion ads as a new distribution channel for malware. To help detect malware distributed via app promotion ads, in this paper, we propose a novel approach, named ADGPE, that synergistically integrates app user interface (UI) exploration with graph learning to automatically collect app promotion ads, detect malware promoted by these ads, and explain the promotion mechanisms employed by"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.07588","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.07588/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:13:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BfeZ3sf4c6+cgfuEJAiqwwlt6DlLhIza2rWCRGabS0tax58wZpYfEOiTG26/wfGjuAtjJVtWpmb8zV4NKuOOAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T16:15:20.110504Z"},"content_sha256":"7ad0cbbe2faca0ea4b340dc02ea7d568e11502c2ed81eb9946a4fb76b206d12c","schema_version":"1.0","event_id":"sha256:7ad0cbbe2faca0ea4b340dc02ea7d568e11502c2ed81eb9946a4fb76b206d12c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ACKAGO7O6OL5DOP72RRXXWRVVO/bundle.json","state_url":"https://pith.science/pith/ACKAGO7O6OL5DOP72RRXXWRVVO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ACKAGO7O6OL5DOP72RRXXWRVVO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T16:15:20Z","links":{"resolver":"https://pith.science/pith/ACKAGO7O6OL5DOP72RRXXWRVVO","bundle":"https://pith.science/pith/ACKAGO7O6OL5DOP72RRXXWRVVO/bundle.json","state":"https://pith.science/pith/ACKAGO7O6OL5DOP72RRXXWRVVO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ACKAGO7O6OL5DOP72RRXXWRVVO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ACKAGO7O6OL5DOP72RRXXWRVVO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f05222ed49e5eb8c34878219ae3e4e234d2f825b312b879079b795a911deaa2","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-10T03:39:13Z","title_canon_sha256":"cdb9831ea8b3843c1dbf1bd00860f85d6672e9b08121c63946499939c3631413"},"schema_version":"1.0","source":{"id":"2410.07588","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.07588","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"arxiv_version","alias_value":"2410.07588v2","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.07588","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"pith_short_12","alias_value":"ACKAGO7O6OL5","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"pith_short_16","alias_value":"ACKAGO7O6OL5DOP7","created_at":"2026-07-05T11:13:13Z"},{"alias_kind":"pith_short_8","alias_value":"ACKAGO7O","created_at":"2026-07-05T11:13:13Z"}],"graph_snapshots":[{"event_id":"sha256:7ad0cbbe2faca0ea4b340dc02ea7d568e11502c2ed81eb9946a4fb76b206d12c","target":"graph","created_at":"2026-07-05T11:13:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.07588/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In Android apps, their developers frequently place app promotion ads, namely advertisements to promote other apps. Unfortunately, the inadequate vetting of ad content allows malicious developers to exploit app promotion ads as a new distribution channel for malware. To help detect malware distributed via app promotion ads, in this paper, we propose a novel approach, named ADGPE, that synergistically integrates app user interface (UI) exploration with graph learning to automatically collect app promotion ads, detect malware promoted by these ads, and explain the promotion mechanisms employed by","authors_text":"Chaoran Chen, Shang Ma, Shao Yang, Shifu Hou, Tao Xie, Toby Jia-Jun Li, Xusheng Xiao, Yanfang Ye","cross_cats":["cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-10T03:39:13Z","title":"Careful About What App Promotion Ads Recommend! Detecting and Explaining Malware Promotion via App Promotion Graph"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.07588","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f84d08e95349017136f16706154e5cfdb86323b9e5bd524bfff6794782fbf7fd","target":"record","created_at":"2026-07-05T11:13:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f05222ed49e5eb8c34878219ae3e4e234d2f825b312b879079b795a911deaa2","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-10T03:39:13Z","title_canon_sha256":"cdb9831ea8b3843c1dbf1bd00860f85d6672e9b08121c63946499939c3631413"},"schema_version":"1.0","source":{"id":"2410.07588","kind":"arxiv","version":2}},"canonical_sha256":"0094033beef397d1b9ffd4637bda35abb479763d518c7356db452271a19ecfa0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0094033beef397d1b9ffd4637bda35abb479763d518c7356db452271a19ecfa0","first_computed_at":"2026-07-05T11:13:13.902654Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:13:13.902654Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7gEAeRWZgP4x93D8NNfjwt0ZBgOmtWcHIynhSqXJE3TYeDjiEspW7GuEGyj/UQGs1SykpJ5ag9PcFomEefSCCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:13:13.903217Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.07588","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f84d08e95349017136f16706154e5cfdb86323b9e5bd524bfff6794782fbf7fd","sha256:7ad0cbbe2faca0ea4b340dc02ea7d568e11502c2ed81eb9946a4fb76b206d12c"],"state_sha256":"3a30ce5b2f7adad7935b08b6b6936c6b2f58ec6b15afa68dad3186e6388237a5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zg+ph5ddH9YIzstEBNMDkLTpaYOQ4YFCVR/xScUsB9bjLT5qmjnma/C1t2T6X1zzL5TscnFVtlMpeXjzS5klBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T16:15:20.113717Z","bundle_sha256":"8ede1dac28ce6b59068660e036a963e29467774825f0dd55dd9dfbef6e76bb00"}}